Описание
The %{password(...)} macro in pastemacroexpander.cpp in the KDE Paste Applet before 4.10.5 in kdeplasma-addons does not properly generate passwords, which allows context-dependent attackers to bypass authentication via a brute-force attack.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 4:5.10.5-0ubuntu1 |
| esm-apps-legacy/xenial | not-affected | 4:5.5.5-0ubuntu1 |
| esm-apps/xenial | not-affected | 4:5.5.5-0ubuntu1 |
| esm-infra-legacy/trusty | not-affected | 4:4.13.3-0ubuntu0.1 |
| lucid | ignored | end of life |
| precise | ignored | end of life |
| precise/esm | DNE | precise was needed |
| quantal | ignored | end of life |
| raring | ignored | end of life |
| saucy | ignored | end of life |
Показывать по
EPSS
2.1 Low
CVSS2
8.4 High
CVSS3
Связанные уязвимости
The %{password(...)} macro in pastemacroexpander.cpp in the KDE Paste Applet before 4.10.5 in kdeplasma-addons does not properly generate passwords, which allows context-dependent attackers to bypass authentication via a brute-force attack.
The %{password(...)} macro in pastemacroexpander.cpp in the KDE Paste Applet before 4.10.5 in kdeplasma-addons does not properly generate passwords, which allows context-dependent attackers to bypass authentication via a brute-force attack.
The %{password(...)} macro in pastemacroexpander.cpp in the KDE Paste ...
The %{password(...)} macro in pastemacroexpander.cpp in the KDE Paste Applet before 4.10.5 in kdeplasma-addons does not properly generate passwords, which allows context-dependent attackers to bypass authentication via a brute-force attack.
EPSS
2.1 Low
CVSS2
8.4 High
CVSS3